CVE-2017-14232

Name of the Vulnerable Software and Affected Versions Free Lossless Image Format (FLIF) version 0.3

Description The issue concerns a denial of service caused by an invalid memory read and application crash. This can be triggered by remote attackers via a crafted flif file, specifically exploiting the read chunk function in flif-dec.cpp.

Recommendations For Free Lossless Image Format (FLIF) version 0.3, consider avoiding the use of the read chunk function in flif-dec.cpp until a patch is available. As a temporary workaround, restrict the processing of crafted flif files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.